In today's Metacurity, I managed to wrestle yesterday's firehose of PHP patch-related news into sixteen paragraphs, in case you're short on time for some reason.
Also in today's issue are tons of other critical infosec developments you should know, including
--Claude flags 493 security gaps across 25 open-source projects,
--OpenAI agents disable safeguards meant to monitor them,
--Interpol operation nets 1.4k arrests and recovers $105m in African cybercrime op,
--Toronto Crime Stoppers halts tips after 1.5m-tip breach,
--LiteLLM supply chain attack steals credentials and plants a backdoor,
--Chinese hackers use AI tool to breach ConnectWise,
--Pentagon builds secret agency for foreign tech sabotage,
--Cybercriminals bypass AI safeguards to automate attacks,
--Meta hit with $25B penalty for misleading users on privacy,
--GitLab patches maximum-severity flaw allowing unauthenticated code execution,
--Cyberattack knocks Richmond schools’ internet, phones and email offline,
--Pentagon faces class action over breach exposing military personnel data,
--Democrats warn of Russian disinformation targeting midterm candidates,
--Federal intelligence center invokes extremism in warning over Flock meeting
https://www.metacurity.com/php2shell-sparks-a-global-patch-panic/
LLMs can contain nasty backdoors AND YOU CAN'T FIND THEM
Any open model whose weights have been edited can carry a backdoor, whether it's a task-specific fine-tune, a merged adapter or an abliterated build. We built one to see what it takes,
#AI
Ruokavirasto julkisti pari juttua vege-juomien käytöstä. Itse olen retkillä kohtuullisen huolettomasti pitänyt kauramaitoa kahvin seuraksi mutta ehkä siellä voikin olla bakteereja ilman että huomaa kuten lehmänmaidosta, jossa muutos on selvä.
"Kasvijuomat eivät kuitenkaan aina osoita selkeitä pilaantumisen merkkejä, vaikka niissä olisi korkeakin bakteeripitoisuus, tai muutokset ovat niin pieniä, että niitä ei välttämättä huomaa."
#vegejuomat
"An den grünen Armbinden waren die Mitglieder von »Kolonien in der Heimat« zu erkennen. Sie organisierten sich nach den Bezirkssektionen ihres Vereins und kennzeichneten ihre Lagerplätze mit nummerierten Holzpflöcken." Barbara Eder heute über die Landbesetzungen anno 1926 in Oberau bei Orth an der Donau. (Paywall) https://www.jungewelt.de/artikel/531781.geschichte-österreichs-mensch-oder-hirsch.html
World’s Largest ‘Glacial Archeology’ Expedition Recovers 48 Stone Age Arrowheads and Shafts https://www.goodnewsnetwork.org/worlds-largest-glacial-archeology-expedition-recovers-48-stone-age-arrowheads-and-shafts/…
📰 „Einen Krieg in Europa werden wir nicht überleben“
#News
Going down some youtube rabbithole, I recently learned that, apparently, it's quite common in the US that gas stations sell sketchy pills, marketed as sex enhancers or energy boosters.
These usually don't contain what the label says, ingredients are often viagra or opioid-like substances. While that's all kinda illegal, there's barely any enforcement, as this falls under "supplement" regulation, which kinda means "nobody looks after that".
All of that sounds so bizarre and fucked up...
I would love to have been at the PCGB Boxster 30th Anniversary event at the British Motor Museum today, but sadly it wasn't to be.
Attending virtually via community photos was great though. 900 cars, and a massive variety of cars and colours. Who said every car has to be black, white or grey?
#porsche #boxster